How to Change Admin Username and Password in WordPress

Changing your WordPress administrator username and password is one of the most important security practices for protecting your website. Whether you have forgotten your login credentials, want to replace the default "admin" username, or simply wish to improve your site's security, knowing how to update these credentials correctly is essential.

Many WordPress websites become vulnerable because administrators continue using weak passwords or predictable usernames. Cybercriminals frequently target WordPress login pages using automated tools that attempt to guess usernames and passwords. By updating both your administrator username and password, you can significantly reduce the risk of unauthorized access.

In this comprehensive guide, you will learn how to change admin username and password in WordPress using multiple proven methods. Each method is suitable for different situations, whether you can still access your WordPress dashboard or have been locked out of your website completely.

How to Change Admin Username and Password in WordPress

Why You Should Change Your WordPress Admin Username and Password

Before learning how to change admin username and password in WordPress, it is helpful to understand why these changes are so important.

The administrator account has complete control over your website. Anyone who gains access to this account can:

• Install or remove plugins
• Change website settings
• Edit posts and pages
• Delete important content
• Upload malicious files
• Create additional administrator accounts
• Lock legitimate users out of the website

Because administrator accounts are extremely powerful, they are often the primary target of hackers.

Changing your administrator username and password regularly helps strengthen your website security and minimizes the chances of successful brute-force attacks.

When Should You Change Your Admin Username and Password?

There are several situations where changing your administrator credentials becomes necessary.

You Are Still Using "admin" as Your Username

Many older WordPress installations used "admin" as the default administrator username.

Since attackers commonly try this username first, replacing it with something unique immediately improves security.

Your Password Is Weak

Passwords such as:

• password123
• admin123
• qwerty
• 12345678
• your website name

can often be cracked within minutes using automated tools.

A strong password should include:

• Uppercase letters
• Lowercase letters
• Numbers
• Symbols
• At least 16 characters

Your Website Has Been Hacked

If your website has experienced unauthorized access, changing the administrator username and password should be among your first recovery steps.

Multiple People Know Your Login Credentials

If developers, freelancers, or former employees previously had access to your administrator account, updating your credentials helps maintain security.

Method 1: Change Your Admin Password from the WordPress Dashboard

This is the easiest method if you can still log in.

Step 1: Log Into WordPress

Visit:

https://yourwebsite.com/wp-admin

Log in using your administrator account.

Step 2: Open Your Profile

Navigate to:

Users → Profile

or

Users → All Users

Then click your administrator account.

Step 3: Generate a New Password

Scroll down until you find:

Account Management

Click:

Generate Password

WordPress automatically creates a strong password.

You may also replace it with your own custom password.

Step 4: Save Changes

Click:

Update Profile

Your administrator password has now been updated.

Method 2: Change Your Password from the Login Screen

If you have forgotten your password but still have access to your email address, WordPress provides an easy password recovery feature.

Step 1: Visit the Login Page

Open:

https://yourwebsite.com/wp-login.php

Click:

Lost your password?

Step 2: Enter Your Username or Email

Type either:

• Username
• Email address

Click:

Get New Password

Step 3: Check Your Email

WordPress sends a secure password reset link.

Open the email.

Click the reset link.

Step 4: Create a New Password

Enter your new password.

Save the changes.

You can now log in using your updated password.

Method 3: Change Your Password Using phpMyAdmin

If you cannot access either your dashboard or email, phpMyAdmin provides another solution.

Step 1: Log Into Your Hosting Control Panel

Open your hosting account.

Launch:

phpMyAdmin

Step 2: Select Your WordPress Database

Choose the database connected to your WordPress website.

If you are unsure, check your:

wp-config.php

Locate:

DB_NAME

Step 3: Open the Users Table

Usually:

wp_users

Some websites use a custom table prefix such as:

abc_users

Step 4: Edit the Administrator Account

Find your administrator account.

Click:

Edit

Locate:

user_pass

Replace the current encrypted value.

Choose:

MD5

Type your new password.

Example:

MySecurePassword2026!

Click:

Go

WordPress automatically re-encrypts the password during the next login.

Method 4: Change the Admin Username by Creating a New Administrator

Unlike passwords, WordPress does not allow usernames to be changed directly from the dashboard.

Instead, you create a new administrator account.

Step 1: Go to Users

Navigate to:

Users → Add New

Step 2: Create a New Administrator

Fill in:

• Username
• Email
• Password

Select:

Administrator

Click:

Add New User

Step 3: Transfer Content

If your old administrator owns posts or pages:

Delete the old account.

WordPress asks whether you want to:

Attribute all content to another user.

Select your new administrator account.

No content will be lost.

Method 5: Change the Username Using phpMyAdmin

Advanced users can modify usernames directly.

Step 1: Open phpMyAdmin

Select your WordPress database.

Step 2: Open

wp_users

Locate:

user_login

Click:

Edit

Replace:

admin

with

yournewusername

Click:

Go

The username is now updated.

Method 6: Change Credentials Using WP-CLI

If your hosting supports WP-CLI, changing administrator credentials becomes very fast.

Update password:

wp user update admin --user_pass="NewStrongPassword123!"

Update username:

WordPress does not officially allow username changes through a simple WP-CLI command.

Instead, create a new administrator account:

wp user create newadmin admin@example.com --role=administrator

Then remove the old account.

Method 7: Change Credentials Using FTP

If your website has serious login problems, FTP can help reset administrator credentials.

This method usually involves editing files temporarily or using a password reset script.

Because it requires technical knowledge, beginners should only use this method if other methods fail.

Always create a backup before making any file changes.

How to Create a Strong Administrator Password

A secure password should be difficult for both humans and automated tools to guess.

Good example:

L8!vQ2@zWp#91RtM

Poor examples:

password
admin123
football
welcome
123456

A strong password should:

• Contain at least 16 characters.
• Include uppercase and lowercase letters.
• Include numbers.
• Include symbols.
• Avoid dictionary words.
• Be unique to your WordPress website.
• Never be reused on other online accounts.

Password managers can generate and securely store complex passwords, making it easier to maintain strong security without having to memorize every credential.

Best Practices for Choosing a Secure Admin Username

Your administrator username is just as important as your password.

Avoid usernames like:

• admin
• administrator
• root
• webmaster
• test
• support

Instead, create something unique that is difficult to guess.

For example:

• jharrison82
• wpmanager458
• studioowner91

Avoid using your full name, company name, or website domain if they are publicly visible, as attackers often use publicly available information when attempting to guess login credentials.

What to Do After Changing Your Credentials

Changing your administrator username and password is only part of securing your website. After updating your credentials, take additional steps to ensure your website remains protected.

First, log out of all active sessions and log in again using your new credentials. This confirms that the changes have been applied successfully.

Next, update any password managers or browser-saved passwords with the new login details to avoid confusion during future logins.

If your website has multiple administrators, inform only the authorized users about the updated login procedures. Never send passwords through unsecured email or messaging applications.

It is also a good idea to review your administrator accounts. Remove any inactive or unnecessary administrator users that no longer require access to the website.

Finally, create a fresh backup of your WordPress website after confirming everything is working properly.

Additional Security Tips for WordPress Administrators

Changing your administrator username and password should be part of a broader security strategy. Consider implementing the following measures to further protect your website:

Combining these practices with strong administrator credentials provides a much higher level of protection than relying on passwords alone.

Common Problems When Changing Admin Username and Password

Advantages and Disadvantages of Changing Admin Username and Password

Comparison of Methods to Change Admin Username and Password

Conclusion

Understanding how to change admin username and password in WordPress is an essential skill for every website owner. Whether you are performing routine security maintenance, recovering from a forgotten password, or replacing the default administrator username, WordPress offers several reliable methods to complete the task.

For most users, updating the password through the WordPress dashboard or using the built-in password recovery feature is the quickest and safest option. If you no longer have dashboard access, tools such as phpMyAdmin or WP-CLI provide effective alternatives. Since WordPress does not allow usernames to be edited directly from the dashboard, creating a new administrator account is generally the recommended approach for changing the administrator username.

By combining strong credentials with additional security measures such as two-factor authentication, regular software updates, limited login attempts, and routine backups, you can greatly reduce the risk of unauthorized access and keep your WordPress website secure for the long term.

Frequently Asked Questions (FAQs)

References

1. How to change WordPress username: 3 effective methods - hostinger.com/tutorials
2. How to Manually Reset Your WordPress Admin Password - greengeeks.com/tutorials